EUVD-2022-52905

Malicious code in bioql PyPI...

CVE-2025-25784: Unrestricted Upload of File with Dangerous Type

An arbitrary file upload vulnerability in the component \c\TemplateController.php of Jizhicms v2.5.4 allows attackers to execute arbitrary code via uploading a crafted Zip file...

CVE-2025-25784

An arbitrary file upload vulnerability in the component \c\TemplateController.php of Jizhicms v2.5.4 allows attackers to execute arbitrary code via uploading a crafted Zip file...

Server side request forgery (ssrf)

A vulnerability was found in JIZHICMS 2.4.5. It has been classified as critical. Affected is the function index of the file TemplateController.php. The manipulation of the argument webapi leads to server-side request forgery. It is possible to launch the attack remotely. The exploit has been...

CVE-2023-2927 JIZHICMS TemplateController.php index server-side request forgery

A vulnerability was found in JIZHICMS 2.4.5. It has been classified as critical. Affected is the function index of the file TemplateController.php. The manipulation of the argument webapi leads to server-side request forgery. It is possible to launch the attack remotely. The exploit has been...

CVE-2023-2927

A vulnerability was found in JIZHICMS 2.4.5. It has been classified as critical. Affected is the function index of the file TemplateController.php. The manipulation of the argument webapi leads to server-side request forgery. It is possible to launch the attack remotely. The exploit has been...

CVE-2023-2927: Server-Side Request Forgery (SSRF)

A vulnerability was found in JIZHICMS 2.4.5. It has been classified as critical. Affected is the function index of the file TemplateController.php. The manipulation of the argument webapi leads to server-side request forgery. It is possible to launch the attack remotely. The exploit has been...

CVE-2022-31390

Jizhicms v2.2.5 was discovered to contain a Server-Side Request Forgery SSRF vulnerability via the Update function in app/admin/c/TemplateController.php...

Server side request forgery (ssrf)

Jizhicms v2.2.5 was discovered to contain a Server-Side Request Forgery SSRF vulnerability via the Update function in app/admin/c/TemplateController.php...

CVE-2022-31390

CVE-2022-31390 affects Jizhicms v2.2.5 and is an SSRF vulnerability exploitable via the Update function in app/admin/c/TemplateController.php. According to the sources, the vulnerability allows server-side requests to be made by the application, with CVSS3.1 base score 9.1 (CRITICAL) and CVSS2 ba...

CVE-2022-31390: Server-Side Request Forgery (SSRF)

Jizhicms v2.2.5 was discovered to contain a Server-Side Request Forgery SSRF vulnerability via the Update function in app/admin/c/TemplateController.php...

PT-2022-20727

Name of the Vulnerable Software and Affected Versions Jizhicms version 2.2.5 Description A Server-Side Request Forgery SSRF issue was found in the Update function within the TemplateController.php file, located at app/admin/c/. This allows for potential exploitation. Recommendations For Jizhicms...